WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress Cost Calculator plugin has a cross-site scripting vulnerability, which can be exploited by attackers with roles as low as Contributor to perform stored cross-site scripting attacks.